# ~60 results on a day
select * from (select _timestamp,count(*) as count_ from "journald" group by _timestamp)  where count_ > 1
# not necessarily real duplicate depending if timestamp in
select * from (select body_message,count(*) as count_ from "journald" group by body_message)  where count_ > 1
# more likely, ~150 in a day
select * from (select body_message,body__source_realtime_timestamp,count(*) as count_ from "journald" group by body_message,body__source_realtime_timestamp)  where count_ > 1